Lucene search
Veracode Vulnerability DatabaseVERACODE:40754HistoryJun 01, 2023 - 7:40 a.m.
Cross-site Scripting (XSS)
2023-06-0107:40:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
cross-site scripting
kiwitcms
javascript
0.001 Low
EPSS
Percentile
32.0%
kiwitcms is vulnerable to Cross-site Scripting (XSS). The vulnerability exists because user uploaded files are not properly validated in certain circumstances which allows an attacker to inject and execute arbitrary JavaScript.
Related
cvelist
cvelist
nvd
nvd
CVE-2023-32686
2023-05-27 04:15:25
github
github
kiwitcms vulnerable to stored XSS via unrestricted files upload
2023-05-22 19:39:46
prion
prion
Input validation
2023-05-27 04:15:00
osv
osv
CVE-2023-32686
2023-05-27 04:15:25
kiwitcms vulnerable to stored XSS via unrestricted files upload
2023-05-22 19:39:46
cve
cve
CVE-2023-32686
2023-05-27 04:15:25